admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
27,166 Commits 697 Branches 195 Tags
55dfdddc4fa415f0e676af841eb08874bbbc8754
Commit Graph

27166 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Michael Haag 55dfdddc4f xworm 2025-05-20 10:48:07 -06:00
Michael Haag 2835fff163 Merge branch 'develop' into captcha 2025-05-20 10:45:11 -06:00
Michael Haag 0ae650a51e fix 2025-05-20 10:43:58 -06:00
Michael Haag d3d6e624df fixed 2025-05-20 10:43:06 -06:00
Michael Haag 75dacb0f51 Logic updates per comment 2025-05-20 10:41:33 -06:00
Nasreddine Bencherchali 7cd1729bdb Merge pull request #3531 from splunk/integration_560_fixes 
Integration 560 fixes
 2025-05-20 18:29:28 +02:00
Bhavin Patel 301f72f1c6 adding src_ip 2025-05-20 09:13:22 -07:00
Bhavin Patel 6020d3623d Merge branch 'develop' into captcha 2025-05-19 15:10:58 -07:00
pyth0n1c 9eb9442d10 Merge pull request #3528 from splunk/ctl_553 
Updating - contenctl in requirements
 2025-05-19 14:22:57 -07:00
Bhavin Patel 043a6fcf49 Merge branch 'develop' into ctl_553 2025-05-19 14:21:15 -07:00
Bhavin Patel 9d72869e5c Merge pull request #3520 from splunk/snort_by_threat_actor 
Cisco Secure Firewall - Intrusion Events by Threat Activity
 2025-05-19 14:07:41 -07:00
Bhavin Patel 2ffcaac0c2 udpating requirements 2025-05-19 13:49:27 -07:00
Bhavin Patel 845a8e8b48 Update dashboards/threat_activity_by_snort_ids.json 
Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com>
 2025-05-19 13:44:43 -07:00
Bhavin Patel 42409fedb5 Update dashboards/threat_activity_by_snort_ids.json 
Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com>
 2025-05-19 13:44:24 -07:00
Bhavin Patel 4a7a59c278 Update dashboards/threat_activity_by_snort_ids.json 
Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com>
 2025-05-19 13:44:07 -07:00
Bhavin Patel ac65c657ed Update dashboards/threat_activity_by_snort_ids.json 
Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com>
 2025-05-19 13:43:24 -07:00
Bhavin Patel 6d957952b7 Update dashboards/threat_activity_by_snort_ids.json 
Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com>
 2025-05-19 13:42:58 -07:00
Bhavin Patel fa7020a303 Merge branch 'develop' into snort_by_threat_actor 2025-05-19 13:31:28 -07:00
Bhavin Patel 1f297c5f9f Merge pull request #3527 from splunk/remove_duplicate_analytic_story_reference 
remove duplicate analytic story in tags
 2025-05-19 13:29:57 -07:00
Bhavin Patel 5868e03952 Merge branch 'develop' into remove_duplicate_analytic_story_reference 2025-05-19 13:12:04 -07:00
Bhavin Patel e0a335e490 Merge pull request #3498 from splunk/snort-correlation-batch 
Cisco Secure Firewall Detections - Intrusion Correlation and Activity
 2025-05-19 13:11:36 -07:00
Eric 8c3cb11d01 remove duplicate analytic story in tags 2025-05-19 12:51:54 -07:00
Bhavin Patel 3fb889d1a4 version 2025-05-19 12:45:59 -07:00
Bhavin Patel dc3e7fd8c4 version 2025-05-19 12:45:29 -07:00
Bhavin Patel 9c9f9deff9 Merge branch 'develop' into captcha 2025-05-19 12:17:59 -07:00
Bhavin Patel 4ae7df7fd2 Merge branch 'develop' into snort_by_threat_actor 2025-05-19 12:17:50 -07:00
Bhavin Patel c085c0cb05 Merge branch 'develop' into snort-correlation-batch 2025-05-19 12:16:55 -07:00
Bhavin Patel 1a23528d7c updating risk and drilldowns 2025-05-19 12:11:35 -07:00
Bhavin Patel 4bad76bebd Merge pull request #3525 from splunk/pr_target_to_pr 
switches pull_request_target
 2025-05-19 12:02:50 -07:00
Bhavin Patel fda0fc2fec Merge branch 'develop' into snort-correlation-batch 2025-05-19 11:58:00 -07:00
Bhavin Patel 6f3788c28f Merge branch 'develop' into snort_by_threat_actor 2025-05-19 11:57:48 -07:00
pyth0n1c b0565ae791 run on pull_requests 
opened by members of
the repo and on a push
to develop, which also
occurs when merging an
internal or external PR
 2025-05-19 11:57:20 -07:00
Michael Haag 2978bc82a1 Merge branch 'develop' into captcha 2025-05-19 12:35:22 -06:00
Bhavin Patel 9dee1033aa Merge branch 'develop' into pr_target_to_pr 2025-05-19 11:25:00 -07:00
Bhavin Patel 511a97eaea Merge pull request #3523 from splunk/bump_contentctl_for_sse_objects 
bump to latest contentctl
 2025-05-19 11:24:37 -07:00
Michael Haag 4bca49f239 CAPTCHA if you Can 
## New Analytic Story
- Fake CAPTCHA Campaigns

## New Analytics
- Windows PowerShell FakeCAPTCHA Clipboard Execution

Tagged others related
 2025-05-19 12:08:58 -06:00
pyth0n1c 05d39853ce switches pull_request_target 
to pull_request for appinspect.
We still allow the labeler to
be pull_request_target to
properly label incoming PRs.
 2025-05-19 10:08:17 -07:00
pyth0n1c b1674950ab bump to latest contentctl 2025-05-15 16:15:59 -07:00
Bhavin Patel 34632f5b81 Merge branch 'develop' into snort_by_threat_actor 2025-05-15 12:51:12 -07:00
Bhavin Patel 5016010fa9 Merge branch 'develop' into snort-correlation-batch 2025-05-15 12:51:02 -07:00
Bhavin Patel 6e6a5d3c50 Merge pull request #3513 from splunk/xworm 
xworm
 2025-05-15 12:50:33 -07:00
Bhavin Patel 655b836b4d Merge branch 'develop' into xworm 2025-05-15 12:01:11 -07:00
Bhavin Patel 10c844457a pushing a detections renamed 2025-05-15 11:52:52 -07:00
Bhavin Patel 7a214c4fd4 Merge pull request #3522 from splunk/extra_field_removal 
Removing duplicate creation of user
 2025-05-15 11:42:52 -07:00
ljstella 57fddbf24e Bumping version & date 2025-05-15 08:04:29 -05:00
ljstella d49440f4fe Removing duplicate creation of user 2025-05-15 07:45:56 -05:00
Nasreddine Bencherchali fee7d91532 Apply suggestions from code review 2025-05-15 11:34:23 +02:00
Nasreddine Bencherchali 78b11fa6a0 Update threat_snort_count.yml 2025-05-15 11:32:13 +02:00
Nasreddine Bencherchali 559f472227 Rename threat_actor_snort_count.yml to threat_snort_count.yml 2025-05-15 11:31:59 +02:00
Nasreddine Bencherchali 42da135696 Rename threat_actor_snort_count.csv to threat_snort_count.csv 2025-05-15 11:31:40 +02:00